CVE-2019-15914

· HIGHModified

← All CVEs

CVSS v3.1

7.5

EPSS

1.31%

Published

Dec 20, 2019

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-20

Affected Products (10)

mi · dgnwg03lm_firmwarevulnerable

mi · dgnwg03lm

mi · zncz03lm_firmwarevulnerable

mi · zncz03lm

mi · mccgq01lm_firmwarevulnerable

mi · mccgq01lm

mi · wsdcgq01lm_firmwarevulnerable

mi · wsdcgq01lm

· rtcgq01lm_firmware

References (4)

https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md

ExploitThird Party Advisory

https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md

ExploitThird Party Advisory

https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_1.md

ExploitThird Party Advisory

https://github.com/chengcheng227/CVE-POC/blob/master/CVE-2019-15914_2.md

ExploitThird Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs